PT-2023-12380 · Kemp · Kemp Loadmaster

Published 2023-01-01 · Updated 2023-01-09 · CVE-2021-41823

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kemp LoadMaster version 7.2.54.1

Description The issue allows certain uses of onmouseover to bypass an XSS protection mechanism in the Web Application Firewall (WAF).

Recommendations For Kemp LoadMaster version 7.2.54.1, consider disabling the use of onmouseover events in the WAF configuration as a temporary workaround until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-41823

Affected Products

Kemp Loadmaster

References · 4

• 🔥 https://pastebin.com/kpx9Nvbf · Exploit
• https://osv.dev/vulnerability/CVE-2021-41823 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41823 · Security Note
• https://t.me/cibsecurity/55720 · Telegram Post